Table of Contents Chapter 1 - Introduction Chapter 2 - Installation Chapter 3A+B - Using F-PROT Chapter 4 - Boot Record Support Chapter 5 - DOS Recovery Chapter 6 - Network Administration Appendix Home Technical Support

2. INSTALLATION

Command's F-PROT Professional for Windows NT adheres to the installation and removal parameters specified by Microsoft.

We strongly recommended that you exit all Windows programs before running the setup program.

INSTALLATION PROCEDURES

The installation disk set consists of 4 diskettes. There are two sets of installation instructions: the Standard Installation and the Setup for Network Administrators. Choose the one that best suits your situation.

STANDARD INSTALLATION INSTRUCTIONS

To install Command's F-PROT Professional, you must be logged on as a member of the local administrators group.
  1. Insert disk 1 and click on the Start button (NT 4.0) or pull down the File menu of Program Manager (NT 3.51).

  2. Select Run and type A:\SETUP (assuming "A:" is your floppy drive).

  3. Choose either the Default or the Custom configuration. The Default installation allows workstation users to set up Command's F-PROT Professional for Windows NT on their local computers. Custom lets you select the components that you want installed.

    Choose Components dialog box

  4. If your computer is connected to a network, the next dialog box that appears is the Service Account for Network Scans. There is a check box at the bottom that says "I'd like to be able to schedule scans of network drives".

    Setup Network Scans dialog box
    By default, the box is selected. If you clear this checkbox, scanning of network drives will be limited to manual scans. If you clear the check box and click Next, the installation begins. If you do not clear the check box, a Command Software AV Scheduling Service dialog box opens.

  5. In the AV Scheduling Service dialog box, the current user information is displayed by default. If you are using your current account, enter your current password. If you wish to change the information, please use an account that meets the following criteria:
    1. The Username must reflect an existing account.
    2. The account must have rights to access network drives.
    3. Scanning requires that the user has the Read access. To disinfect, quarantine or delete, the user must have the Write access.
    NOTE: If possible, use a password that does not expire. If you change the password for this account, you must change it in Command's F-PROT Professional via the Preferences|Advanced|Service Account dialog box. If your password expires, scheduled scans will not function on network drives.

    If you enter an account that does not exist or if you enter an invalid password, Command's F-PROT Professional will not validate the service account. As a result, scans of network drives will not take place. Additionally, Windows NT's Event Viewer will log a message regarding the invalidated service account.


    AV Scheduling Service dialog box
    Manual scans of local and network drives are allowed and DVP is active by default.

  6. You are asked if you wish to make a rescue disk. If so, insert a clean diskette into the floppy drive. Command's F-PROT Professional will format the diskette and add the necessary files. (NOTE: Select NO when asked to format another diskette).

  7. When SETUP is complete, the Setup Complete dialog box displays. Select Finish and you are done!
    The rescue disk that can be created during installation contains a copy of the computer's master boot record (MBR) and a copy of its boot sector. The rescue disk does not contain boot files. Should you need to use the rescue disk, you will need to boot the computer with a separate boot disk. Then, you can use our Fixdisk Program.

SETUP FOR NETWORK ADMINISTRATORS

The NETADMIN parameter can be added to the command line when installing Command's F-PROT Professional for Windows NT. Using this command sets up an area on the network for users to install from such that individual diskettes are not needed for each workstation. Plus, by using the NETADMIN command, the System Administrator can control some key functions of Command's F-PROT Professional such as preventing a user from turning off real-time protection, manual scanning of network drives and disabling a users ability to disinfect viruses.To use this capability, follow these steps:
  1. Insert setup Disk 1 and select Start (NT 4.0) or pull down the File menu of Program Manager (NT 3.51).

  2. Select Run and type: A:\SETUP NETADMIN (assuming that you are using your A: floppy drive).

    After the Welcome screen, the Network Setup Configuration dialog box will open. Enter the location on the network where you want to store shared components of Command's F-PROT Professional. Please use a UNC path that does not include spaces. This is necessary because InstallShield's SETUP.EXE is 16-bit application and spaces included in a path will cause an error. For example:

    \\SERVER\SHARED\INSTALL\SHARE
    These shared files include F-PROT.EXE, the .FPT files (F-PROT Task),
    Help files, the Readme file, and assorted .DLL's.

  3. Enter the location for the SETUP components. This is the area on the network that users will access so that they can install Command's F­PROT Professional. Please use a UNC path. For example:
    \\SERVER\SHARED\INSTALL\SETUP

  4. There is a check box that controls whether you want users to be able to scan network drives. Decide which is best for you. If you clear the checkbox, go to Step 8.

  5. Select Next.

  6. The following screen lets you enter information about the account that users will use for scheduled scans of network drives. Please use an account that meets the following criteria:
    1. The Username must reflect an existing account.
    2. The account must have rights to access network drives.
    3. Scanning requires that the user has Read access. To disinfect, quarantine or delete, the user must have Write access.
    4. The account should be accessible for all users.NOTE: If possible, use a password that does not expire. If you change the password for this account, you must also change it in Command's F-PROT Professional via the Preferences|Advanced|Service Account dialog box. If your password expires, scheduled scans will not function on network drives.
  7. Choose Next. Setup will begin and you will be requested to insert the additional diskettes.

  8. The F-PROT Config dialog box will open. Fill in your name and company information.

  9. Select Options to view or modify Command's F-PROT Professional capabilities. Select or clear the choices and then either Save your settings or choose Cancel.

    Options dialog box

  10. Setup will continue and a final dialog box opens to confirm that the installation was successful.

    Setup Complete dialog box

    In the setup components location that you selected, there are four batch files. Two of them, CLIENT.BAT and SILENT.BAT, allow you to install Command's F-PROT Professional from the setup location on the network using a shared location with only a few files residing on the local workstation. The other two batch files, LCLIENT.BAT and LSILENT.BAT, let you install all components to the local workstation.

    By running CLIENT.BAT from the workstation, all the components necessary to run Command's F-PROT Professional are automatically installed with a minimum of user intervention. SILENT.BAT does the same installation; however, NO user intervention is needed. The result of this installation is to have DVP (real-time protection) installed on the local workstation as well as having CSS AV Scheduler installed so that scheduled scans can occur. These components (CSS AVS and other files) are located in %SYSTEMROOT%\SYSTEM32\ and similarly, CSS DVP is located in %SYSTEMROOT%\SYSTEM32\DRIVERS.

    LCLIENT.BAT or LSILENT.BAT function as described above except that all of Command's F-PROT Professional's components are installed on the local workstation.

    After installation, you can access Command's F-PROT Professional by double-clicking on the blue F in the tray on the right side of the taskbar. Or, if you wish, you may create a permanent shortcut as described next.

    NOTE: Read Chapter 6, Network Administration, for more information on network installations.

Creating A Shortcut:

If you are using Windows NT 4.0, you may want to create a shortcut for easy access to Command's F-PROT Professional. There are many ways to create shortcuts. The following is one example:
  1. Right click on the desktop.
  2. Click on New.
  3. Click on Shortcut.
  4. Select Browse.
  5. Double-click on Program Files.
  6. Double-click on Command Software.
  7. Double-click on F-PROTNT.
  8. Select F-PROT32.EXE then choose Open.
  9. Choose Next and select Finish.
In Windows NT 3.51, a program group containing the icons for Command's F-PROT Professional, will be created for your desktop.

TO REMOVE

Command's F-PROT Professional for Windows NT can be easily removed from Windows NT 4.0 by using the following method:
  1. Double-click on My Computer.
  2. Double-click on Control Panel.
  3. Double-click on Add/Remove Programs.
  4. Click on F-PROT for Windows NT.
  5. Click on Remove.
  6. Follow the defaults on the screen.
Removing Command's F-PROT Professional from Windows NT 3.51 requires using FPUNINST.EXE (installed in the F-PROTNT directory) from the DOS command prompt. The example assumes the software is installed to the default location, C:\Program Files\Command Software\F-PROTNT. From the DOS prompt go to the F-PROTNT directory and type the following:
FPUNIST PROGRA~1\COMMAN~1\F-PROTNT

EMERGENCY DISKS

There are many reasons to keep a set of emergency disks. Sometimes files become corrupted and the emergency disks can be used to restore your system. There is also the possibility of contracting a boot sector virus. Boot sector viruses are usually spread by leaving an infected disk in the drive when the computer is turned off. The next time the computer is turned on, if it is set to boot from that drive, the system will become infected. Although Command's F-PROT Professional scans for MBR viruses, it is still important to keep emergency disks available.

If you did not create a Command's F-PROT Professional rescue disk during installation, you can either re-run the setup program and one will be created automatically or you can create one manually. If you create a rescue disk manually, add a copy of the Master Boot Record (MBR) to the disk. Be certain that your system has been checked for viruses before beginning this task. See the "Master Boot Record backup" section for instructions.

In addition to Command's F-PROT Professional rescue disk, it is also important to have both an emergency repair disk and the Windows NT workstation setup disks (3 disk set). The instructions for creating the emergency repair disk and the workstation setup disks are described in the following paragraphs. Before beginning, you will need four high-density formatted diskettes and the Windows NT installation CD-ROM.

WINDOWS NT EMERGENCY REPAIR DISK

The emergency repair disk, although not a backup tool, contains setup information that helps you restore your computer if you have problems such as corrupted files. To create an emergency repair disk, do the following:
  1. Click on Start (NT 4.0) or in NT 3.51, choose File from Program Manager.
  2. Click on Run.
  3. Choose the Browse button.
  4. Navigate to RDISK.EXE which should be in \WINNT\SYSTEM32\.
  5. When you run RDISK.EXE, the Repair Disk Utility opens and provides instructions.
  6. When finished, write-protect the disk and make a of copy of it. Label and date both the original disk and the copy. Then place both disks in a safe place. It is always a good idea to update your emergency repair disk as you make changes to your configuration.

WINDOWS NT WORKSTATION SETUP DISKS

  1. Go to the Windows NT Start button and choose Programs/Command Prompt. This will take you to a DOS prompt.
  2. Insert the Windows NT installation CD and then access the drive where the CD is located.
  3. On the CD, change to the I386 folder.
  4. Type: WINNT32 /OX (in Win 95, Win 3.x or DOS type WINNT /OX)
  5. You will see the Upgrade/Installation screen. Choose the location of the NT files. Press Continue.
  6. Label your diskettes according to the display. Insert the diskettes as directed. Disk #3 is first, then disk #2, then finally disk #1, the setup boot disk.
  7. When completed, you will be returned to the DOS prompt.

CREATING AN F-PROT RESCUE DISK MANUALLY

You can run Command's F-PROT Professional from DOS only if your primary partition for Windows is FAT, not NTFS.
The goal of Command's F-PROT Professional rescue disk is to provide you with a diskette that allows you to boot your system to DOS and then run Command's F-PROT Professional for DOS from the diskette. Before beginning this process, run Command's F-PROT Professional to be sure your system is free of viruses.

The following instructions assume you have DOS on your NT computer. The first thing you will need to do is copy the necessary DOS files to the diskette. This is done by formatting a high-density diskette as follows:

FORMAT A: /S

You can then add Command's F-PROT Professional for DOS files, the FIXDISK utility and the Master Boot Record information.

F-PROT for DOS files

The files listed below can now be added to your Command's F-PROT Professional rescue disk. They can be obtained from the installation diskettes or from the F-PROT directory that was created during installation. It is also acceptable simply to use the installation diskette containing F-PROT.EXE to run Command's F-PROT Professional for DOS.

F-PROT.EXE
SIGN.DEF
ENGLISH.TX0

Master Boot Record backup

These steps ensure that you have a copy of the Master Boot Record and the boot sector (BS) of your hard drive. This will also copy the FIXDISK utility to your disk.
  1. Boot to DOS with either your Command's F-PROT Professional rescue disk or a DOS system disk.
  2. Change Directory into: C:\Progra~1\Comman~1\f-protnt.
  3. Insert your Command's F-PROT Professional rescue disk into the A: drive.
  4. Copy FIXDISK.EXE to the floppy disk by typing:
    COPY FIXDISK.EXE A:
  5. Type the following:
    FIXDISK RESCUE CREATE

    (This stores a copy of the MBR/BS on drive C:)
  6. Type the following:
    FIXDISK RESCUE CREATE A:

    (This stores a copy of the MBR/BS on drive A:)
  7. Write-protect the diskette and place it with the originals.
Additional information on the FIXDISK utility is available Chapter 4, Boot Record Support.